A limited data set is protected health information that does not include any of the following 16 categories of direct identifiers, but that may include city, state, ZIP code or elements of dates, concerning an individual or an individual’s relatives, employers or household members:

• Names
• Postal address information, other than town or city, state and ZIP code
• Telephone numbers
• Fax numbers
• Electronic mail addresses
• Social Security numbers
• Medical record numbers
• Health plan beneficiary numbers
• Account numbers
• Certificate/license numbers
• Vehicle identifiers and serial numbers, including license plate numbers
• Device identifiers and serial numbers
• Web universal resource locators (URLs)
• Internet Protocol (IP) address numbers
• Biometric identifiers, including fingerprints and voiceprints
• Full-face photographic images and any comparable images